# Protected against the attacks that take small business sites down

> Security headers, attack traffic filtered at the network edge, spam protection on every form and no plugins waiting to be patched. Included on every plan.

- Source: https://nerdsharks.com/features/security-and-ddos-protection
- Publisher: Nerdsharks (Exeter, Devon, UK)
- Updated: 2026-09-27

Most small business websites that get hacked are not targeted by anyone in particular. Bots scan the internet for an out-of-date plugin, a weak login page or a form they can flood with junk, and they find one. Nerdsharks sites are built so there is far less for them to find. There are no third-party plugins to fall behind on updates. Your site runs behind a network that filters floods of attack traffic before it reaches your pages. Security headers tell browsers to refuse common tricks, and every form has spam protection that does not make real customers solve puzzles. No website is unbreakable, and we will not claim yours is, but it is a much harder target than most.

## How it works

1. **No plugins to patch** - Many hacked sites are let down by one forgotten plugin. Your site does not run a plugin marketplace, so there is no pile of third-party add-ons to keep up to date.
2. **Attack traffic filtered at the edge** - Your site sits behind a network built to absorb floods of fake traffic, known as DDoS attacks, and to filter it out before it reaches your pages.
3. **Security headers set** - We set the instructions that tell browsers to insist on encrypted connections, refuse to load your pages inside other sites and block injected scripts.
4. **Spam blocked quietly** - Forms use hidden traps, timing checks and rate limits to catch bots, so real customers just fill them in and press send.

## Why it matters

- **No defaced homepage** - A hacked site showing someone else’s content, or a browser warning, does lasting damage to trust. Fewer weak points means far less chance of it happening to you.
- **An inbox without the junk** - Spam enquiries waste time and hide the real ones. Quiet spam protection means the enquiries you get are almost all from people.
- **Nothing for you to maintain** - You never log in to update anything. We look after security as part of the hosting, and we fix it if anything gets through.

## Questions

### Can my website be hacked?

Any website can in theory be attacked, and we will not claim otherwise. Yours is built to remove the most common weak points: no plugins to fall out of date, protected logins, security headers and attack filtering at the network edge. If something ever did get through, we fix it and restore from the daily backup.

### What is DDoS protection?

DDoS protection filters out floods of fake traffic that are sent to knock a website offline. Your site runs behind a network that absorbs and filters that traffic before it reaches your pages.

### Will spam protection stop real customers contacting me?

Spam protection is designed to be invisible to real customers, so nobody has to tick boxes of traffic lights. It catches most automated junk, though no filter catches every single message.

### Do I need to buy a security plugin?

No, you do not need to buy a security plugin or service. Security is part of managed hosting on every plan, and there are no plugins on your site to secure.